{"id":"https://openalex.org/W7160659090","doi":"https://doi.org/10.1145/3774906.3802795","title":"Characterizing Security and Privacy Risks in Smart Home IoT Device Access Sharing","display_name":"Characterizing Security and Privacy Risks in Smart Home IoT Device Access Sharing","publication_year":2026,"publication_date":"2026-05-08","ids":{"openalex":"https://openalex.org/W7160659090","doi":"https://doi.org/10.1145/3774906.3802795"},"language":null,"primary_location":{"id":"doi:10.1145/3774906.3802795","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774906.3802795","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM/IEEE International Conference on Embedded Artificial Intelligence and Sensing Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3774906.3802795","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003180757","display_name":"Yinxin Wan","orcid":"https://orcid.org/0000-0003-1535-5253"},"institutions":[{"id":"https://openalex.org/I33434090","display_name":"University of Massachusetts Boston","ror":"https://ror.org/04ydmy275","country_code":"US","type":"education","lineage":["https://openalex.org/I33434090"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yinxin Wan","raw_affiliation_strings":["University of Massachusetts Boston, Boston, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0003-1535-5253","affiliations":[{"raw_affiliation_string":"University of Massachusetts Boston, Boston, Massachusetts, USA","institution_ids":["https://openalex.org/I33434090"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135646149","display_name":"Ting Xu","orcid":"https://orcid.org/0009-0004-5049-6849"},"institutions":[{"id":"https://openalex.org/I33434090","display_name":"University of Massachusetts Boston","ror":"https://ror.org/04ydmy275","country_code":"US","type":"education","lineage":["https://openalex.org/I33434090"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ting Xu","raw_affiliation_strings":["University of Massachusetts Boston, Boston, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0009-0004-5049-6849","affiliations":[{"raw_affiliation_string":"University of Massachusetts Boston, Boston, Massachusetts, USA","institution_ids":["https://openalex.org/I33434090"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069839170","display_name":"Tran Ngoc Bao Huynh","orcid":"https://orcid.org/0000-0002-6023-7689"},"institutions":[{"id":"https://openalex.org/I107077323","display_name":"Worcester Polytechnic Institute","ror":"https://ror.org/05ejpqr48","country_code":"US","type":"education","lineage":["https://openalex.org/I107077323"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tran Ngoc Bao Huynh","raw_affiliation_strings":["Worcester Polytechnic Institute, Worcester, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0002-6023-7689","affiliations":[{"raw_affiliation_string":"Worcester Polytechnic Institute, Worcester, Massachusetts, USA","institution_ids":["https://openalex.org/I107077323"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135682604","display_name":"Jun Dai","orcid":"https://orcid.org/0000-0002-6890-6429"},"institutions":[{"id":"https://openalex.org/I107077323","display_name":"Worcester Polytechnic Institute","ror":"https://ror.org/05ejpqr48","country_code":"US","type":"education","lineage":["https://openalex.org/I107077323"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jun Dai","raw_affiliation_strings":["Worcester Polytechnic Institute, Worcester, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0002-6890-6429","affiliations":[{"raw_affiliation_string":"Worcester Polytechnic Institute, Worcester, Massachusetts, USA","institution_ids":["https://openalex.org/I107077323"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135662760","display_name":"Xiaoyan Sun","orcid":"https://orcid.org/0000-0002-0321-2338"},"institutions":[{"id":"https://openalex.org/I107077323","display_name":"Worcester Polytechnic Institute","ror":"https://ror.org/05ejpqr48","country_code":"US","type":"education","lineage":["https://openalex.org/I107077323"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaoyan Sun","raw_affiliation_strings":["Worcester Polytechnic Institute, Worcester, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0002-0321-2338","affiliations":[{"raw_affiliation_string":"Worcester Polytechnic Institute, Worcester, Massachusetts, USA","institution_ids":["https://openalex.org/I107077323"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049423626","display_name":"Kuai Xu","orcid":"https://orcid.org/0000-0001-6659-6773"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kuai Xu","raw_affiliation_strings":["Arizona State University, Glendale, Arizona, USA"],"raw_orcid":"https://orcid.org/0000-0001-6659-6773","affiliations":[{"raw_affiliation_string":"Arizona State University, Glendale, Arizona, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135672629","display_name":"Guoliang Xue","orcid":"https://orcid.org/0000-0002-5833-8894"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Guoliang Xue","raw_affiliation_strings":["Arizona State University, Tempe, Arizona, USA"],"raw_orcid":"https://orcid.org/0000-0002-5833-8894","affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, Arizona, USA","institution_ids":["https://openalex.org/I55732556"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1129","last_page":"1136"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.21719999611377716,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.21719999611377716,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.19249999523162842,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.08389999717473984,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.5494999885559082},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5238000154495239},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.4796000123023987},{"id":"https://openalex.org/keywords/interoperability","display_name":"Interoperability","score":0.4733000099658966},{"id":"https://openalex.org/keywords/home-automation","display_name":"Home automation","score":0.44909998774528503},{"id":"https://openalex.org/keywords/data-sharing","display_name":"Data sharing","score":0.4447999894618988},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4431000053882599},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.4341999888420105}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6935999989509583},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6013000011444092},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5777000188827515},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.5494999885559082},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5238000154495239},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.4796000123023987},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.4733000099658966},{"id":"https://openalex.org/C507571656","wikidata":"https://www.wikidata.org/wiki/Q848436","display_name":"Home automation","level":2,"score":0.44909998774528503},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.4447999894618988},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4431000053882599},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.4341999888420105},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.39250001311302185},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.3352000117301941},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.32679998874664307},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.3230000138282776},{"id":"https://openalex.org/C2776889888","wikidata":"https://www.wikidata.org/wiki/Q1135789","display_name":"Unintended consequences","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2709999978542328},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.26969999074935913},{"id":"https://openalex.org/C51332947","wikidata":"https://www.wikidata.org/wiki/Q1172305","display_name":"Shared resource","level":2,"score":0.2694000005722046}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3774906.3802795","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774906.3802795","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM/IEEE International Conference on Embedded Artificial Intelligence and Sensing Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3774906.3802795","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774906.3802795","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM/IEEE International Conference on Embedded Artificial Intelligence and Sensing Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":4,"referenced_works":["https://openalex.org/W2890188242","https://openalex.org/W2972103753","https://openalex.org/W3087852527","https://openalex.org/W4387609078"],"related_works":[],"abstract_inverted_index":{"Smart":[0],"home":[1,92,169],"IoT":[2,93,170],"systems":[3],"have":[4],"become":[5],"widely":[6],"deployed":[7],"in":[8,29,65,161],"modern":[9],"households,":[10],"enabling":[11],"convenient":[12],"functionalities":[13],"such":[14],"as":[15],"remote":[16],"control,":[17],"automation,":[18],"and":[19,25,61,98,115,150,158,184],"real-time":[20],"monitoring.":[21],"A":[22],"commonly":[23],"supported":[24],"frequently":[26],"used":[27],"capability":[28],"these":[30],"ecosystems":[31],"is":[32],"device":[33,40,83,120,134,163],"access":[34,84,121],"sharing,":[35,139],"which":[36],"allows":[37],"a":[38,52,79],"primary":[39],"owner":[41],"to":[42,47,132,137,181],"grant":[43],"other":[44],"users":[45,180],"permission":[46],"control":[48],"or":[49,127],"interact":[50],"with":[51],"device.":[53],"However,":[54],"despite":[55],"its":[56],"security-critical":[57],"nature,":[58],"the":[59,66,162],"security":[60,114,183],"privacy":[62,116,152,185],"practices":[63],"involved":[64],"sharing":[67,85,106,124,129,164,175],"process":[68],"itself":[69],"remain":[70],"largely":[71],"under-examined.":[72],"To":[73],"address":[74],"this":[75],"gap,":[76],"we":[77,108],"conduct":[78],"systematic":[80],"study":[81],"of":[82,104,113,141,166],"workflows":[86,176],"across":[87],"56":[88],"commercially":[89],"available":[90],"smart":[91,168],"devices":[94],"spanning":[95],"diverse":[96],"vendors":[97],"product":[99],"categories.":[100],"Through":[101],"comprehensive":[102],"analysis":[103],"real-world":[105],"mechanisms,":[107],"identify":[109],"9":[110],"recurring":[111],"classes":[112],"risks,":[117],"including":[118],"coarse":[119,123],"constraints,":[122,125],"weak":[126],"missing":[128],"credentials,":[130],"inability":[131,136],"revoke":[133,138],"access,":[135,149],"lack":[140],"transparency":[142],"regarding":[143],"invitation":[144],"acceptance,":[145],"uncontrolled":[146],"re-sharing,":[147],"over-privileged":[148],"unintended":[151],"exposure.":[153],"Our":[154],"findings":[155],"reveal":[156],"widespread":[157],"systemic":[159],"weaknesses":[160],"implementations":[165],"current":[167],"systems,":[171],"underscoring":[172],"that":[173],"insecure":[174],"can":[177],"directly":[178],"expose":[179],"persistent":[182],"threats.":[186]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-05-09T00:00:00"}